From bbad91369f2b2523552a2af3e844516094523e70 Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Wed, 26 Aug 2026 15:36:27 -0400 Subject: [PATCH] Tighten permissions on netplan files --- confluent_osdeploy/common/profile/scripts/confignet | 2 ++ 1 file changed, 2 insertions(+) diff --git a/confluent_osdeploy/common/profile/scripts/confignet b/confluent_osdeploy/common/profile/scripts/confignet index 732e5020..3f8daecc 100644 --- a/confluent_osdeploy/common/profile/scripts/confignet +++ b/confluent_osdeploy/common/profile/scripts/confignet @@ -303,9 +303,11 @@ class NetplanManager(object): prune_from_cloudinit.append(iface) with open('/etc/netplan/10-{0}-confluentcfg.yaml'.format(iface), 'w') as planout: planout.write(yaml.dump({'network': {'version': 2, 'ethernets': {iface: {'dhcp4': False}}}})) + os.chmod('/etc/netplan/10-{0}-confluentcfg.yaml'.format(iface), 0o600) cfgfile = '/etc/netplan/30-{0}-confluentcfg.yaml'.format(devname) with open(cfgfile, 'w') as planout: planout.write(yaml.dump(newcfg)) + os.chmod(cfgfile, 0o600) os.umask(oumask) if prune_from_cloudinit: prunecfgs = ['/etc/netplan/00-installer-config.yaml',